
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS213293.roa
File: AS213293.roa (raw, json)
Hash identifier: R9iC3+/O5QSN4/pO5kmfwdyRMJzxNa0dKkiq8COCfHk=
Subject key identifier: 8F:18:45:47:D3:B9:6C:D1:7A:A9:1D:3E:32:7B:C0:D3:3A:56:78:2E
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 2044F4304F16A4A0F6E28D44563614B32FA01A87
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS213293.roa
Signing time: Fri 05 Jun 2026 07:12:23 +0000
ROA not before: Fri 05 Jun 2026 07:07:23 +0000
ROA not after: Fri 04 Jun 2027 07:12:23 +0000
asID: 213293
IP address blocks: 2a0a:6040:9a00::/40 maxlen: 48
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:44:f4:30:4f:16:a4:a0:f6:e2:8d:44:56:36:14:b3:2f:a0:1a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jun 5 07:07:23 2026 GMT
Not After : Jun 4 07:12:23 2027 GMT
Subject: CN=8F184547D3B96CD17AA91D3E327BC0D33A56782E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:52:a7:9d:8a:6e:5c:9b:c7:df:7f:d0:61:7a:
58:92:36:68:4d:13:bb:ca:40:cf:99:db:5e:5c:b4:
7a:1d:86:b4:07:cb:2d:b3:b4:18:47:84:c5:f0:cf:
39:c9:9d:84:81:75:68:3a:55:83:1a:dd:65:70:82:
0b:c3:45:67:65:fa:a7:fa:ba:75:45:21:a7:b8:b2:
7c:7e:da:fe:aa:89:7f:e4:8b:a4:29:6f:4f:e8:cb:
4c:e1:e1:04:ac:71:aa:a4:9a:c7:32:87:15:65:21:
72:ba:78:31:ba:b0:09:81:93:57:ed:df:21:6a:6f:
cb:1b:a9:ec:cb:ab:6f:34:79:a5:6a:80:f2:20:82:
fa:d3:e6:4b:24:cc:4e:d0:b4:d6:70:f0:d5:35:34:
81:02:94:8b:66:7c:b0:2c:3d:f6:51:78:7c:87:8e:
c0:97:6d:1f:71:d9:3a:d7:82:c9:1e:8c:4b:3e:64:
4b:3f:45:06:67:a3:bb:9a:50:b9:cb:ba:45:52:a8:
6b:d9:aa:15:69:68:f8:d4:16:97:0c:89:d0:a0:76:
23:7b:dd:6c:bb:e7:47:e2:ec:ae:ed:4a:77:16:5f:
48:72:54:39:ac:ce:8a:77:86:b6:39:7b:fa:63:20:
bb:f3:fa:db:86:75:c3:5b:05:76:64:d0:a0:86:df:
9f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:18:45:47:D3:B9:6C:D1:7A:A9:1D:3E:32:7B:C0:D3:3A:56:78:2E
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS213293.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:9a00::/40
Signature Algorithm: sha256WithRSAEncryption
3f:8e:9d:aa:34:48:32:a3:cc:98:7d:d2:0e:ef:1b:7f:6a:f8:
7c:57:cf:fc:a4:af:d9:30:11:c4:eb:39:e7:87:e7:c7:df:8f:
b4:45:ba:5a:40:ea:e4:9e:f3:fe:86:66:58:83:e8:35:00:56:
72:be:e3:54:ea:60:f3:08:e8:5f:0c:99:c0:06:4a:09:02:db:
2a:01:dc:50:83:82:64:74:61:32:1b:c9:ae:d8:4e:7b:d3:97:
9f:e3:69:58:51:14:38:e2:01:20:9c:17:a9:d8:8e:3a:99:71:
76:50:22:ba:1d:0d:44:4a:02:b2:c8:29:b7:0b:ff:f9:35:9c:
f4:79:f2:56:f3:66:e6:c6:9a:53:73:76:ad:2c:24:89:bc:f6:
ee:31:28:a1:27:86:66:95:e9:2a:ab:21:c1:45:78:1e:c5:30:
8d:e2:a8:c8:12:a9:24:a6:03:3b:3c:09:36:92:4e:e5:04:ac:
ad:69:24:d2:f4:fd:a8:da:b0:52:54:1f:0b:d2:2c:6f:a1:94:
d5:90:35:62:18:62:b5:d2:81:e9:29:c9:2e:6c:e2:d8:5d:0c:
13:36:ae:4e:2f:c5:f2:f5:4b:7f:81:44:16:e3:17:bb:6a:da:
7f:cd:73:02:3a:4b:bd:da:7a:9e:dc:53:c2:89:4e:b2:82:f5:
e9:d8:bb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:23:10 2026 by rpki-client